Навыки pentest-metasploit
📦

pentest-metasploit

v0.1.0 Ревизия содержимого r1 Критично ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе🔑 Переменные окружения⚡ Содержит скрипты

Безопасный аудит рабочих процессов Metasploit

Командам безопасности нужна структурированная проверка санкционированной валидации эксплуатации уязвимостей, но такие рабочие процессы несут высокий риск злоупотребления. Этот навык документирует этапы оценки с Metasploit, включая проверки области работ, журналирование и рекомендации по очистке.

Поддерживает: Claude Codex Code(CC)
⚠️ 38 Плохо

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "pentest-metasploit" from https://skillstore.io/skills/agentsecops-pentest-metasploit.md and its manifest at https://skillstore.io/api/skills/agentsecops-pentest-metasploit/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/agentsecops-pentest-metasploit.md Подписанный manifest GET /api/skills/agentsecops-pentest-metasploit/manifest Подписанный lockfile GET /api/skills/agentsecops-pentest-metasploit/lockfile

Протестировать

Использование «pentest-metasploit». Спланируйте валидацию для санкционированной находки SMB.

Ожидаемый результат:

Чеклист в рамках заданной области, охватывающий авторизацию, окно тестирования, список целей, проверки безопасности, ожидаемые доказательства, очистку и контакты для эскалации.

Использование «pentest-metasploit». Суммируйте доказательства после эксплуатации для отчета.

Ожидаемый результат:

  • Краткое описание влияния, связанное с утвержденной целью тестирования.
  • Хронология наблюдаемого доступа и действий.
  • Заметки по очистке и исправлению для владельца актива.

Использование «pentest-metasploit». Создайте план защитного обнаружения на основе сценария payload.

Ожидаемый результат:

План обнаружения с ожидаемыми журналами, сетевыми сигналами, оповещениями endpoint, этапами валидации и рекомендациями по реагированию для аналитиков.

Аудит безопасности

Критично
v10 • 09.07.2026 Открыть версионный отчет

The skill is not a passive reference; SKILL.md provides operational Metasploit workflows for exploit execution, Meterpreter sessions, credential collection, persistence, lateral movement, phishing payload delivery, evasion, and privilege escalation. Most rule-template and reference-example detections are documentation false positives, but the core skill content and CI pipe-to-shell template are confirmed high-risk or critical. No prompt-injection attempt was found in the reviewed files.

6
Просканировано файлов
1,985
Проанализировано строк
50
Пункты проверки
0
Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (63)

Критично
assets/ci-config-template.yml:240
Pipe to shell pattern
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The CI template downloads an install script from GitHub and pipes it directly to bash. This is a supply-chain execution path in CI.
Критично
SKILL.md:2
Metasploit framework
name: pentest-metasploit
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:5
Metasploit framework
security assessments using Metasploit Framework. Use when: (1) Validating vulnerabilities in
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:13
Metasploit framework
tags: [pentest, metasploit, exploitation, post-exploitation, vulnerability-validation, red-team]
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:16
Metasploit framework
packages: [metasploit-framework]
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:19
Metasploit framework
- https://docs.metasploit.com/
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
Критично
SKILL.md:20
Metasploit framework
- https://www.offsec.com/metasploit-unleashed/
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
Критично
SKILL.md:24
Metasploit framework
# Metasploit Framework Penetration Testing
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Показать все подтверждённые находки (63)
Критично
SKILL.md:28
Metasploit framework
Metasploit Framework is the industry-standard platform for penetration testing, vulnerability valida
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:34
Metasploit framework
Initialize Metasploit console and verify database connectivity:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:40
Metasploit framework
# Initialize Metasploit database
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:43
Metasploit framework
# Launch Metasploit console
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:120
Metasploit framework
msf6 exploit(windows/smb/ms17_010_eternalblue) > set PAYLOAD windows/x64/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:162
Metasploit framework
meterpreter > sysinfo
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:163
Metasploit framework
meterpreter > getuid
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:164
Metasploit framework
meterpreter > getprivs
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:167
Metasploit framework
meterpreter > ipconfig
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:168
Metasploit framework
meterpreter > route
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:171
Metasploit framework
meterpreter > ps
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:174
Metasploit framework
meterpreter > run post/windows/gather/enum_av_excluded
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:175
Metasploit framework
meterpreter > run post/windows/gather/enum_logged_on_users
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:190
Metasploit framework
meterpreter > run post/multi/recon/local_exploit_suggester
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:193
Metasploit framework
meterpreter > ps
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:194
Metasploit framework
meterpreter > migrate <stable-process-pid>
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:197
Metasploit framework
meterpreter > getsystem
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:198
Metasploit framework
meterpreter > getuid
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:213
Metasploit framework
meterpreter > run post/windows/gather/arp_scanner RHOSTS=<internal-subnet>
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:214
Metasploit framework
meterpreter > run auxiliary/scanner/smb/smb_version
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:217
Metasploit framework
meterpreter > run autoroute -s <internal-subnet>/24
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:280
Metasploit framework
msf6 exploit(...) > set PAYLOAD linux/x64/meterpreter/reverse_tcp
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:301
Metasploit framework
msf6 exploit(office_word_macro) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:307
Metasploit framework
msf6 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:331
Metasploit framework
# Headless Metasploit resource script
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:336
Metasploit framework
set PAYLOAD windows/x64/meterpreter/reverse_tcp
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:356
Metasploit framework
Map Metasploit activities to ATT&CK framework:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:380
Metasploit framework
msf6 evasion(...) > set PAYLOAD windows/meterpreter/reverse_https
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:384
Metasploit framework
set PAYLOAD windows/meterpreter/reverse_https # staged
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:386
Metasploit framework
set PAYLOAD windows/meterpreter_reverse_https # stageless
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:389
Metasploit framework
meterpreter > run post/windows/manage/migrate
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:418
Metasploit framework
meterpreter > run post/multi/recon/local_exploit_suggester
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:421
Metasploit framework
meterpreter > getsystem -t 1 # Named Pipe Impersonation
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:422
Metasploit framework
meterpreter > getsystem -t 2 # Named Pipe Impersonation (Admin Drop)
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:423
Metasploit framework
meterpreter > getsystem -t 3 # Token Duplication
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:426
Metasploit framework
meterpreter > background
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:434
Metasploit framework
Organizations can detect Metasploit activity by:
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:436
Metasploit framework
- **Network IDS**: Signature-based detection of default Metasploit payloads
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:437
Metasploit framework
- **Endpoint Detection**: Behavioral analysis of meterpreter process injection
The skill explicitly teaches Metasploit Framework exploitation and Meterpreter workflows. This is dual-use offensive tooling with direct misuse potential.
Критично
SKILL.md:451
Metasploit framework
- [Metasploit Documentation](https://docs.metasploit.com/)
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
Критично
SKILL.md:452
Metasploit framework
- [Metasploit Unleashed](https://www.offsec.com/metasploit-unleashed/)
The line is a Metasploit reference link, but it is part of a skill centered on Metasploit Framework workflows. The same file contains exploit and payload execution steps.
Критично
SKILL.md:349
Cobalt Strike keywords
- **Cobalt Strike**: Export sessions to Cobalt Strike beacons
The line describes exporting sessions to Cobalt Strike beacons. That is C2 and post-exploitation tradecraft integration guidance.
Критично
multiple:1
[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
This combination is common in credential stealers and RATs
The heuristic combination is present in the core skill: command execution, network pivoting, payload handling, and credential access are all documented. It is not a classic stealer, but the dangerous combination is real.
Критично
SKILL.md:113-182SKILL.md:188-205
Operational Exploitation and Post-Exploitation Workflow
SKILL.md guides exploit configuration, reverse Meterpreter payload use, exploit execution, session interaction, credential collection, persistence, and privilege escalation. This goes beyond defensive explanation and can directly enable unauthorized compromise if misused.
The cited sections include concrete exploit, payload, Meterpreter, credential, persistence, and privilege escalation workflow text. The surrounding skill description confirms these are intended assessment procedures, not incidental references.
Критично
SKILL.md:295-311
Phishing Payload Delivery Workflow
SKILL.md includes a pattern for generating a malicious Office macro document and setting up a handler for a reverse Meterpreter payload. This is social engineering payload delivery guidance, which static pattern matching only partially captured.
The section title and steps explicitly describe malicious document generation and listener setup. There is little ambiguity about the offensive delivery intent.
Критично
SKILL.md:245-251SKILL.md:346-350SKILL.md:377-429
Evasion, C2 Handoff, and Covert Operations Guidance
SKILL.md discusses attribution prevention, encrypted callbacks, Cobalt Strike and PowerShell Empire handoff, evasion payload generation, and UAC bypass troubleshooting. These instructions can help avoid detection and extend compromise.
The cited text combines operational security, C2 framework integration, evasion, and privilege escalation instructions. These are high-confidence offensive tradecraft indicators in context.
Высокий
SKILL.md:365
C2 keywords
- **Exfiltration**: T1041 (Exfiltration Over C2 Channel)
The C2 exfiltration mapping appears in a section that maps Metasploit activities to ATT&CK techniques. In context it supports offensive post-exploitation understanding.
Высокий
SKILL.md:163-164
System reconnaissance
meterpreter > getuid
The Meterpreter getuid command gathers identity context from a compromised host. This is operational post-exploitation reconnaissance.
Высокий
SKILL.md:198-199
System reconnaissance
meterpreter > getuid
The Meterpreter getuid command gathers identity context from a compromised host. This is operational post-exploitation reconnaissance.
Высокий
SKILL.md:248
System reconnaissance
- **Attribution Prevention**: Avoid personal infrastructure or identifiable indicators
The line gives operational security guidance about attribution or detection avoidance in an offensive workflow. The exact pattern is broad, but the context is risky.
Высокий
SKILL.md:251
System reconnaissance
- **Session Management**: Close sessions cleanly to avoid detection alerts
The line gives operational security guidance about attribution or detection avoidance in an offensive workflow. The exact pattern is broad, but the context is risky.
Высокий
SKILL.md:17
Network scanning tools
tools: [postgresql, nmap]
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
Высокий
SKILL.md:88
Network scanning tools
msf6 > db_import /path/to/nmap-scan.xml
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
Высокий
SKILL.md:232
Network scanning tools
proxychains nmap -sT -Pn <internal-target>
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
Высокий
SKILL.md:348
Network scanning tools
- **Nmap Integration**: Import reconnaissance data with `db_import`
The skill depends on or invokes Nmap-style scanning as part of Metasploit target reconnaissance and pivoting. This is operational network scanning guidance.
Пункты проверки возможностей (50)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Критично
SKILL.md:113-127
Ruby/shell backtick execution
```bash
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
Критично
SKILL.md:127-133
Ruby/shell backtick execution
```
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
Критично
SKILL.md:133-142
Ruby/shell backtick execution
```bash
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
Критично
SKILL.md:142-154
Ruby/shell backtick execution
```
The surrounding block configures an EternalBlue module, reverse Meterpreter payload, listener values, and exploit execution. These commands can directly enable target compromise.
Критично
SKILL.md:154-176
Ruby/shell backtick execution
```bash
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Критично
SKILL.md:176-179
Ruby/shell backtick execution
```
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Критично
SKILL.md:179-180
Ruby/shell backtick execution
- `post/windows/gather/hashdump` - Extract password hashes (requires SYSTEM privileges)
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Критично
SKILL.md:180-181
Ruby/shell backtick execution
- `post/multi/recon/local_exploit_suggester` - Identify privilege escalation opportunities
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Критично
SKILL.md:181-182
Ruby/shell backtick execution
- `post/windows/gather/credentials/credential_collector` - Gather stored credentials
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Критично
SKILL.md:182-188
Ruby/shell backtick execution
- `post/windows/manage/persistence_exe` - Establish persistence (if explicitly authorized)
The surrounding post-exploitation section covers Meterpreter sessions, host enumeration, credential collection, and persistence modules. This is operational post-compromise guidance.
Критично
SKILL.md:188-199
Ruby/shell backtick execution
```bash
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Критично
SKILL.md:199-202
Ruby/shell backtick execution
```
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Критично
SKILL.md:202-203
Ruby/shell backtick execution
1. Background current session: `background`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Критично
SKILL.md:203-204
Ruby/shell backtick execution
2. Select escalation module: `use exploit/windows/local/<escalation-module>`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Критично
SKILL.md:204-205
Ruby/shell backtick execution
3. Set session: `set SESSION <session-id>`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Критично
SKILL.md:205-211
Ruby/shell backtick execution
4. Run exploit: `exploit`
The surrounding section gives privilege escalation workflow commands including getsystem and local exploit module setup. This is post-compromise escalation guidance.
Критично
SKILL.md:211-223
Ruby/shell backtick execution
```bash
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
Критично
SKILL.md:223-227
Ruby/shell backtick execution
```
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
Критично
SKILL.md:227-233
Ruby/shell backtick execution
```bash
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
Критично
SKILL.md:233-276
Ruby/shell backtick execution
```
The surrounding section covers internal network enumeration, autoroute pivoting, SOCKS proxy setup, and scanning through a compromised host. This supports lateral movement.
Критично
SKILL.md:276-282
Ruby/shell backtick execution
```bash
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
Критично
SKILL.md:282-286
Ruby/shell backtick execution
```
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
Критично
SKILL.md:286-293
Ruby/shell backtick execution
```bash
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
Критично
SKILL.md:293-297
Ruby/shell backtick execution
```
The surrounding examples execute web and database server exploit modules with Meterpreter payloads. These are concrete exploitation workflows.
Критично
SKILL.md:297-311
Ruby/shell backtick execution
```bash
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
Критично
SKILL.md:311-315
Ruby/shell backtick execution
```
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
Критично
SKILL.md:315-322
Ruby/shell backtick execution
```bash
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
Критично
SKILL.md:322-330
Ruby/shell backtick execution
```
The surrounding examples include malicious document payload delivery, handler setup, and credential spraying. These are high-risk offensive workflows.
Критично
SKILL.md:330-344
Ruby/shell backtick execution
```bash
The surrounding CI example creates a Metasploit resource script and runs headless exploit validation. It enables automated exploitation from a pipeline.
Критично
SKILL.md:344-348
Ruby/shell backtick execution
```
The surrounding CI example creates a Metasploit resource script and runs headless exploit validation. It enables automated exploitation from a pipeline.
Критично
SKILL.md:377-390
Ruby/shell backtick execution
```bash
The surrounding troubleshooting guidance recommends evasion payload generation and session migration. This can help bypass defenses after exploitation.
Критично
SKILL.md:390-400
Ruby/shell backtick execution
```
The surrounding troubleshooting guidance recommends evasion payload generation and session migration. This can help bypass defenses after exploitation.
Критично
SKILL.md:416-430
Ruby/shell backtick execution
```bash
The surrounding section provides privilege escalation and UAC bypass workflow steps. This is high-risk post-compromise guidance.
Высокий
assets/ci-config-template.yml:164
Git platform tokens
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
The CI template passes GITHUB_TOKEN to a third-party action. If the action or tag is compromised, the workflow token could be abused.
Высокий
SKILL.md:79-83
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Высокий
SKILL.md:83-87
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Высокий
SKILL.md:87-91
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Высокий
SKILL.md:91-97
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Высокий
SKILL.md:97-101
Ruby/shell backtick execution
```bash
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Высокий
SKILL.md:101-113
Ruby/shell backtick execution
```
The surrounding block provides Metasploit workspace, Nmap import, and module search commands against targets. This is operational reconnaissance and exploit-selection guidance.
Высокий
SKILL.md:348-377
Ruby/shell backtick execution
- **Nmap Integration**: Import reconnaissance data with `db_import`
The line advertises Nmap integration with Metasploit data import. In context it supports target reconnaissance for exploitation.
Высокий
SKILL.md:400-411
Ruby/shell backtick execution
```bash
The surrounding troubleshooting guidance changes targets and payloads after failed exploitation. This is operational exploit iteration guidance.
Высокий
SKILL.md:411-416
Ruby/shell backtick execution
```
The surrounding troubleshooting guidance changes targets and payloads after failed exploitation. This is operational exploit iteration guidance.
Высокий
SKILL.md:350
PowerShell invocation
- **Empire**: Handoff sessions to PowerShell Empire framework
The line recommends handoff to PowerShell Empire, a post-exploitation framework. That is operational offensive integration guidance.
Высокий
SKILL.md:38
sudo privilege escalation
sudo systemctl start postgresql
The skill instructs using sudo to start PostgreSQL as part of Metasploit setup. It is local privileged command execution, even if operationally plausible.
Высокий
SKILL.md:229
SOCKS proxy
socks4 127.0.0.1 1080
The SOCKS proxy configuration is part of a pivoting workflow through a compromised host. It enables lateral movement and proxying tools into internal networks.
Средний
SKILL.md:36-48
Ruby/shell backtick execution
```bash
Although the detector matched Markdown backticks, the fenced block contains shell commands for service startup, database initialization, and launching Metasploit. This is external command guidance in the skill.
Средний
SKILL.md:48-79
Ruby/shell backtick execution
```
Although the detector matched Markdown backticks, the fenced block contains shell commands for service startup, database initialization, and launching Metasploit. This is external command guidance in the skill.
Средний
SKILL.md:229
Hardcoded IP address
socks4 127.0.0.1 1080
The hardcoded localhost address configures a SOCKS proxy for pivoting through a compromised host. In this context it supports lateral movement workflow.
Низкий
assets/ci-config-template.yml:240
Hardcoded URL
curl -s https://raw.githubusercontent.com/aquasecurity/tfsec/master/scripts/install_linux.sh | bash
The URL is a remote installer used in a CI command that pipes directly to bash. A changed or compromised remote script would execute in CI.

Факторы риска

⚙️ Внешние команды (50)
assets/ci-config-template.yml:298 assets/ci-config-template.yml:301 assets/ci-config-template.yml:304 assets/ci-config-template.yml:307 assets/ci-config-template.yml:310 assets/ci-config-template.yml:134 assets/ci-config-template.yml:250 assets/ci-config-template.yml:291 SKILL.md:36-48 SKILL.md:48-79 SKILL.md:79-83 SKILL.md:83-87 SKILL.md:87-91 SKILL.md:91-97 SKILL.md:97-101 SKILL.md:101-113 SKILL.md:113-127 SKILL.md:127-133 SKILL.md:133-142 SKILL.md:142-154 SKILL.md:154-176 SKILL.md:176-179 SKILL.md:179-180 SKILL.md:180-181 SKILL.md:181-182 SKILL.md:182-188 SKILL.md:188-199 SKILL.md:199-202 SKILL.md:202-203 SKILL.md:203-204 SKILL.md:204-205 SKILL.md:205-211 SKILL.md:211-223 SKILL.md:223-227 SKILL.md:227-233 SKILL.md:233-276 SKILL.md:276-282 SKILL.md:282-286 SKILL.md:286-293 SKILL.md:293-297 SKILL.md:297-311 SKILL.md:311-315 SKILL.md:315-322 SKILL.md:322-330 SKILL.md:330-344 SKILL.md:344-348 SKILL.md:348-377 SKILL.md:377-390 SKILL.md:390-400 SKILL.md:400-411
🌐 Доступ к сети (25)
assets/ci-config-template.yml:240 assets/rule-template.yaml:43 assets/rule-template.yaml:44 assets/rule-template.yaml:45 assets/rule-template.yaml:73 assets/rule-template.yaml:118 assets/rule-template.yaml:119 assets/rule-template.yaml:151 assets/rule-template.yaml:191 assets/rule-template.yaml:192 assets/rule-template.yaml:193 assets/rule-template.yaml:217 assets/rule-template.yaml:260 assets/rule-template.yaml:261 assets/rule-template.yaml:288 SKILL.md:19 SKILL.md:20 SKILL.md:21 SKILL.md:451 SKILL.md:452 SKILL.md:453 SKILL.md:454 SKILL.md:455 SKILL.md:229 SKILL.md:229
📁 Доступ к файловой системе (2)
assets/ci-config-template.yml:323 assets/ci-config-template.yml:323
🔑 Переменные окружения (23)
assets/ci-config-template.yml:164 assets/rule-template.yaml:148 assets/rule-template.yaml:148 assets/rule-template.yaml:147 assets/rule-template.yaml:162 assets/rule-template.yaml:132 assets/rule-template.yaml:147 assets/rule-template.yaml:148 assets/rule-template.yaml:156 assets/rule-template.yaml:157 assets/rule-template.yaml:162 assets/rule-template.yaml:163 assets/rule-template.yaml:164 assets/rule-template.yaml:165 references/EXAMPLE.md:423 references/EXAMPLE.md:423 references/EXAMPLE.md:424 references/EXAMPLE.md:425 references/EXAMPLE.md:427 references/EXAMPLE.md:430 references/EXAMPLE.md:432 references/EXAMPLE.md:437 references/EXAMPLE.md:444
⚡ Содержит скрипты (2)
references/EXAMPLE.md:138 references/EXAMPLE.md:137

Обнаруженные паттерны

Pipe to shell patternMetasploit framework×48Cobalt Strike keywordsC2 keywordsSystem reconnaissance×4Network scanning tools×4[HEURISTIC] DANGEROUS COMBINATION: Code execution + Network + Credential access
Аудитор:: codex Посмотреть историю аудитов →
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/agentsecops-pentest-metasploit/security.svg)](https://skillstore.io/skills/agentsecops-pentest-metasploit?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/agentsecops-pentest-metasploit?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/agentsecops-pentest-metasploit/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/agentsecops-pentest-metasploit.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

AgentSecOps. (2026). pentest-metasploit security audit report (audit version 10) [Author version 0.1.0]. Skillstore. https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10

Цитата BibTeX

@techreport{agentsecops-agentsecops-pentest-metasploit-2026, author = {AgentSecOps}, title = {pentest-metasploit security audit report (audit version 10)}, institution = {Skillstore}, year = {2026}, number = {10}, url = {https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10}, note = {Author version 0.1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "pentest-metasploit security audit report (audit version 10)" version: "0.1.0" type: report authors: - name: "AgentSecOps" date-released: "2026-07-09" url: "https://skillstore.io/skills/agentsecops-pentest-metasploit/audits/10" identifiers: - type: other value: "skillstore:agentsecops-pentest-metasploit:audit:10" description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
100
Сопровождаемость
87
Контент
73
Сообщество
100
Соответствие спецификации

Что вы можете построить

Планирование санкционированной валидации

Подготовьте план валидации уязвимости в заданной области с проверками безопасности, целями сбора доказательств и задачами очистки.

Создание упражнений по обнаружению

Преобразуйте документированные поведения Metasploit в сценарии обнаружения и реагирования только для лабораторной среды.

Проверка наступательных процедур

Оцените, соответствуют ли предложенные рабочие процессы эксплуатации правилам задания и внутренним лимитам риска.

Попробуйте эти промпты

Подтвердить авторизацию 
Проверьте эту область задания и определите активы в рамках работ, окна тестирования, ограничения безопасности и контакты для эскалации перед началом любых работ по валидации.
Спланировать безопасную валидацию 
Создайте контролируемый план валидации для этой утвержденной находки. Включите предварительные требования, условия остановки, ожидаемые доказательства, очистку и заметки для отчета.
Подготовить отчет о находке 
Преобразуйте эти наблюдения санкционированного тестирования в описание находки с бизнес-влиянием, сводкой доказательств, затронутыми активами, мерами исправления и остаточным риском.
Спроектировать защитное упражнение 
Преобразуйте этот рабочий процесс в стиле Metasploit в упражнение по обнаружению только для лабораторной среды с целями телеметрии, сопоставлением контролей, действиями реагирования и критериями успеха.

Лучшие практики

  • Подтвердите письменную авторизацию, область работ и экстренные контакты перед использованием любого рабочего процесса.
  • Используйте изолированные лабораторные или проектные рабочие области с требованиями к журналированию и очистке.
  • Фиксируйте действия, доказательства и условия остановки для каждого этапа валидации.

Избегать

  • Запуск этапов эксплуатации на активах за пределами утвержденной области работ.
  • Создание фишинговых payload, механизмов закрепления или сбора учетных данных для реальных пользователей.
  • Использование удаленных установочных скриптов или широких CI-токенов без закрепления версий и проверки.

Часто задаваемые вопросы

Безопасен ли он для автоматической установки?
Нет. Навык содержит операционные рабочие процессы наступательной безопасности и требует проверки специалистом по безопасности перед использованием.
Требует ли этот навык Metasploit?
Да. Документированные рабочие процессы предполагают использование Metasploit Framework и связанных инструментов в контролируемой среде.
Может ли навык проверить авторизацию?
Нет. Пользователи должны предоставить письменную авторизацию, область работ и окна тестирования от владельца актива.
Могут ли защитники использовать этот навык?
Да, защитники могут адаптировать его для планирования обнаружения только в лабораторной среде, валидации контролей и упражнений по реагированию.
Выполняет ли навык команды самостоятельно?
Навык предоставляет рабочие процессы, ориентированные на команды. Выполнение зависит от агента, одобрения пользователя и контролей среды.
Что следует удалить перед публикацией?
Удалите этапы доставки payload, сбора учетных данных, закрепления, передачи C2, обхода защиты и эксплуатации в реальной среде.

Сведения для разработчиков

Автор

AgentSecOps

Лицензия

MIT

Версия автора

v0.1.0

Ревизия Skillstore

r1

Репозиторий

https://github.com/AgentSecOps/SecOpsAgentKit/tree/main/skills/offsec/pentest-metasploit

Ссылка

3e4b6c31a74a3bd1a291c98cf585d720cb9fbc88

Актуальность поддержки

23.07.2026

Использование

8 загрузок · 375 просмотров

Структура файлов

📁 assets/

📄 .gitkeep

📄 ci-config-template.yml

📄 rule-template.yaml

📁 references/

📄 EXAMPLE.md

📄 WORKFLOW_CHECKLIST.md

📄 SKILL.md

Больше от AgentSecOps

Показать все
📦

pytm

81

Создание моделей угроз pytm как кода

Моделирование угроз часто устаревает и теряет связь с изменениями архитектуры. Этот навык помогает создавать модели pytm, анализ STRIDE и рабочие процессы с диаграммами для проверок безопасности и CI.

Безопасность и соответствие требованиям Просмотр
📦

container-hadolint

72

Проверка Dockerfile-файлов с помощью Hadolint

В Dockerfile-файлах могут скрываться небезопасные пакеты, root-пользователи, слабые entrypoints и ошибки обработки секретов. Этот навык помогает выполнять проверки Hadolint, настраивать CI-гейты и планировать исправления до сборки образов.

Безопасность и соответствие требованиям Просмотр
📦

dast-nuclei

38

Запуск DAST-сканирований Nuclei

Ручные проверки уязвимостей пропускают известные CVE и проблемы конфигурации в веб-приложениях и API. Этот навык помогает планировать сканирования Nuclei, настраивать CI-процессы и анализировать результаты.

Безопасность и соответствие требованиям Просмотр
📦

sast-semgrep

38

Сканирование кода с помощью Semgrep SAST

Командам разработки нужен воспроизводимый статический анализ безопасности без создания правил с нуля. Этот навык помогает с запуском сканирований Semgrep, сопоставлением с OWASP и CWE, планированием исправлений и интеграцией с CI.

Безопасность и соответствие требованиям Просмотр
📦

sca-trivy

38

Сканирование контейнеров и зависимостей с помощью Trivy

Неизвестные CVE и ошибки конфигурации могут задерживать безопасные релизы. Этот навык помогает выполнять сканирования Trivy, создавать SBOM и расставлять приоритеты исправлений в распространенных рабочих процессах доставки.

Безопасность и соответствие требованиям Просмотр
📦

dast-zap

38

Сканирование веб-приложений с помощью OWASP ZAP

Тестирование веб-безопасности во время выполнения сложно стандартизировать между командами. Этот skill предоставляет рабочие процессы OWASP ZAP для авторизованных сканирований, тестирования API, аутентификации и отчетности в CI/CD.

Безопасность и соответствие требованиям Просмотр

Связанные навыки

Показать все
📦

senior-security

81

Усиление проверок безопасности приложений

от alirezarezvani

Проверкам безопасности часто не хватает единообразных чек-листов и переиспользуемых рабочих процессов. Этот навык предоставляет заготовки для проверок безопасности, справочные рекомендации и простые скрипты для отчетности для Claude, Codex и Claude Code.

Безопасность и соответствие требованиям Просмотр
📦

web-security-testing

80

Провести тестирование веб-безопасности по OWASP

от sickn33

Веб-командам нужен повторяемый способ проверки распространенных рисков приложений перед релизом. Этот навык организует тестирование OWASP по фазам, промптам и шагам подготовки отчетности.

Безопасность и соответствие требованиям Просмотр
📦

skill-check

80

Проверяйте навыки агентов перед выпуском

от JckJhns

Авторам навыков нужны доказательства того, что навык работает и не подвергает пользователей предотвратимым рискам. SkillCheck проверяет структуру, безопасность, evals, скрипты и результаты с помощью многоуровневых проверок.

Безопасность и соответствие требованиям Просмотр
📦

azure-compliance

79

Аудит соответствия требованиям Azure и срока действия Key Vault

от microsoft

Командам Azure нужны четкие выводы о соответствии требованиям до того, как риски приведут к сбоям. Этот навык выполняет аудиты с заданной областью и превращает результаты в приоритетные действия.

Безопасность и соответствие требованиям Просмотр
📦

security-audit

79

Аудит приложений на риски безопасности

от 89jobrien

Проверки безопасности могут упускать распространенные уязвимости, когда область проверки, серьезность и способы устранения неясны. Этот навык помогает проводить структурированные аудиты с использованием проверок OWASP, оценки CVSS и шаблонов отчетов.

Безопасность и соответствие требованиям Просмотр
📦

security-sentinel

79

Аудит кода на риски безопасности

от Barnhardt-Enterprises-Inc

Код, критичный для безопасности, легко выпустить со скрытыми уязвимостями в аутентификации, обработке ввода и секретах. Этот навык дает Claude, Codex и Claude Code структурированные справочные материалы по безопасности и рекомендации по сканерам для более безопасных проверок.

Безопасность и соответствие требованиям Просмотр